Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
File: nebkJy4s44e0zASxQ_czCdcTYps.mft (raw, json)
Hash identifier: 2XXwBfdYYDQP3Y9YI/0vhYnOoI4BjIfzGZVh8APqNfc=
Subject key identifier: 96:D3:17:D2:01:F8:9E:C1:E0:78:2A:18:FF:00:27:25:DE:AD:7A:B3
Authority key identifier: 9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
Certificate issuer: /CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Certificate serial: 0194BCA9DF2906D9966846D58DA81F5530A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: nebkJy4s44e0zASxQ_czCdcTYps.crl (hash: gHJFpZ3Wa+32j4/Pl3DdX2rp6TTSHB7XbTvX7DBwXZQ=)
2: wdWrYhgAvtXz2L_2rHuOQnR2pys.roa (hash: 9W7x5fPDoemvxBWf8HTErYR3bguqLTiKRDIt4wIvQlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:df:29:06:d9:96:68:46:d5:8d:a8:1f:55:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=96d317d201f89ec1e0782a18ff002725dead7ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9f:2e:8a:36:12:f6:62:38:f8:e5:c2:09:ac:
f2:3b:af:58:f0:63:e1:7d:83:f0:d2:d4:b2:1e:b9:
c6:e0:ac:dd:37:5f:73:cb:71:8d:c4:d2:c7:1b:59:
f7:79:28:24:af:2b:1f:33:e6:f1:cc:48:b5:55:0f:
d4:16:f3:d8:38:ff:5c:9b:81:51:c9:01:a3:8f:a1:
1c:7a:00:79:a3:50:a8:a2:00:f6:27:bd:e9:fb:18:
50:fb:9f:64:c5:8b:54:27:69:ee:3e:6e:8c:60:44:
89:4c:40:70:c9:99:3c:0e:b3:47:d0:8c:10:6f:e6:
2b:38:da:38:7f:d9:08:f5:32:f8:8c:80:4f:e7:dd:
38:63:ff:eb:c0:cc:bd:50:27:c8:44:35:f6:31:65:
7e:f6:3f:30:38:97:35:1c:7b:06:09:a0:0f:e9:e1:
72:9e:74:31:87:6b:51:fb:ef:1a:c2:30:58:8a:9b:
a1:49:b3:27:fc:96:13:9f:76:56:eb:be:56:75:d0:
5f:96:1a:9d:e1:12:97:4c:70:ca:0d:61:a6:f6:bd:
75:1f:cb:f6:99:a3:19:80:21:29:c2:82:28:ac:90:
5c:83:1c:4e:c5:fe:d9:59:c7:6a:40:3e:f9:f7:83:
90:00:d2:57:dc:2c:ea:38:bc:94:31:e5:b8:5b:0f:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D3:17:D2:01:F8:9E:C1:E0:78:2A:18:FF:00:27:25:DE:AD:7A:B3
X509v3 Authority Key Identifier:
keyid:9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:9a:17:55:44:10:63:9e:14:b9:be:41:26:0c:2c:40:db:6b:
32:95:ed:0c:af:80:8f:18:6f:43:5a:53:f9:b3:dc:11:0a:e2:
50:3c:41:92:24:09:e6:55:bb:1d:4a:c5:f1:ea:de:05:cc:97:
a4:ca:52:fe:7f:cd:0a:e2:37:d9:1b:0f:17:be:88:fd:9b:33:
93:62:de:6b:33:9d:d5:f6:03:25:10:75:8a:5e:32:76:91:b1:
a7:ed:30:1b:d1:15:f8:67:eb:46:b0:6a:06:73:a3:cf:b4:72:
75:72:99:92:58:da:e4:74:4e:27:0b:f2:3a:7c:e1:72:4e:f7:
9e:ff:1c:ef:d6:2f:dd:52:0a:98:3f:fc:cf:5d:09:f1:d0:38:
0b:6a:e0:cb:10:0c:d4:45:f8:b1:f0:71:ed:1f:a7:db:b3:e4:
c6:71:99:c1:7e:2a:fa:eb:b6:10:e9:09:e0:78:f1:8e:fc:16:
de:67:49:b6:bb:2b:0d:40:4d:54:91:a4:11:61:03:3a:f6:77:
88:a7:3c:53:19:66:d0:4c:87:cc:5e:26:8d:e0:dc:c5:5f:02:
08:59:bc:21:5c:44:e4:28:ce:44:46:73:1a:63:d2:a8:22:67:
6b:d8:58:89:14:df:26:df:74:01:86:09:41:dd:18:c3:8d:15:
69:b1:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:29 2025 by rpki-client